CVE-2024-31843: OS Command Injection

Published May 23, 2024

Updated

An issue was discovered in Italtel Embrace 1.6.4. The Web application does not properly check the parameters sent as input before they are processed on the server side. This allows authenticated users to execute commands on the Operating System.

Affected Software

2 affected components

Italtel Embrace

Italtel Embrace=1.6.4

Event History

Jan 1, 1970

CVE Published

via MITRE·12:00 AM

May 23, 2024

CVE Published

via NVD·07:16 PM

Aug 2, 2024

Data Sourced

via MITRE·02:06 AM

Description

Frequently Asked Questions

What is the severity of CVE-2024-31843?

CVE-2024-31843 is considered a high-severity vulnerability due to its potential for authenticated users to execute system commands.

How do I fix CVE-2024-31843?

To fix CVE-2024-31843, update the Italtel Embrace application to the latest version that addresses this vulnerability.

Who is affected by CVE-2024-31843?

CVE-2024-31843 affects users of Italtel Embrace version 1.6.4 and potentially earlier versions.

What types of attacks can result from CVE-2024-31843?

CVE-2024-31843 can be exploited for command injection attacks, allowing an authenticated user to execute arbitrary commands on the server.

Is a patch available for CVE-2024-31843?

Yes, a patch is available that resolves the parameter validation issue in Italtel Embrace affecting CVE-2024-31843.